Computer Science & Engineering Student | Defensive Security | SOC | Web Application Security
📍 Karnataka, India | 🎓 BGS Institute of Technology (BGSIT) | Expected Graduation: 2027
I am a final-year CSE student specializing in defensive security operations, vulnerability assessment, and web application security. This repository contains my documented security lab writeups and reports from platforms including PortSwigger Academy, TryHackMe, and the Google Cybersecurity Certificate program.
- 🏆 TryHackMe: Top 15% Globally — tryhackme.com/p/Rakshitha
- 🔗 LinkedIn: linkedin.com/in/rakshitha-t-752803299
Cyber-Portfolio/
│
├── Writeups/ # Lab writeups from PortSwigger Academy and TryHackMe
│
├── Reports/ # Formal security assessment and audit reports
│
└── README.md
| Lab | Technique | Status |
|---|---|---|
| SQL Injection Vulnerability in WHERE Clause Allowing Retrieval of Hidden Data | OR 1=1 injection, comment-based bypass | ✅ Solved |
| SQL Injection Vulnerability Allowing Login Bypass | Comment-based authentication bypass (administrator'--) |
✅ Solved |
Each writeup includes:
- Objective — what the lab tests
- Methodology — step-by-step approach taken
- Payload used — exact injection string and explanation
- Observed behavior — what changed in the application
- Root cause — why the vulnerability exists
- Remediation — parameterized queries, input sanitization
Google Cybersecurity Professional Certificate — Module 2 Project
A structured controls and compliance assessment for a simulated organization covering:
- ✅ Controls Assessment — evaluated 14 security controls across physical, administrative, and technical categories
- ✅ Compliance Review — assessed against PCI DSS, GDPR, and SOC Type 1/2 standards
- ✅ Risk Gap Analysis — identified missing controls and prioritized remediation steps
- ✅ Remediation Report — produced formal documentation with actionable recommendations
Google Cybersecurity Certificate — Module 3
- Analyzed DNS and ICMP traffic logs using tcpdump
- Identified UDP port 53 unreachable error causing site outage for www.yummyrecipesforme.com
- Investigated ICMP echo reply messages from 203.0.113.2 indicating DNS server failure
- Documented incident timeline, root cause, and recommended remediation steps
Google Cybersecurity Certificate — Module 3
- Identified SYN flood attack from TCP traffic log analysis
- Analyzed log entries 52–54 showing abnormal SYN packet volume
- Explained TCP three-way handshake and how SYN floods exploit it
- Differentiated between DoS (single source) and DDoS (multiple sources)
- Documented 504 Gateway Timeout and RST, ACK packet behavior as attack indicators
- Recommended mitigation: rate limiting, SYN cookies, firewall rules
| Certification | Issuer | Status |
|---|---|---|
| Google Cybersecurity Professional Certificate (Modules 1, 2 & 3) | Google / Coursera | 🔄 In Progress — Verify |
| Introduction to Cybersecurity | Cisco Networking Academy | ✅ Completed — May 2026 |
| AWS Educate Machine Learning Foundations | Amazon Web Services | ✅ July 2026 |
| AWS Educate Introduction to Generative AI | Amazon Web Services | ✅ July 2026 |
| Category | Skills |
|---|---|
| Security Concepts | OWASP Top 10, Vulnerability Assessment, CVE Research, SQL Injection Detection, Network Traffic Analysis, SYN Flood/DoS Detection, Incident Reporting |
| Security Tools | Wireshark, Splunk (basic), Burp Suite, Nmap, Kali Linux, tcpdump, CyberChef |
| Languages | Python, SQL, HTML/CSS |
| Frameworks | NIST CSF, PCI DSS, GDPR, SOC Type 1/2, MITRE ATT&CK, ISO 27001 |
- Completing Google Cybersecurity Professional Certificate
- Expanding PortSwigger SQL Injection learning path
All lab work is conducted in legal, controlled environments provided by the respective platforms.